Method and system achieving individualized protected space in an operating system

Abstract

Aspects for achieving individualized protected space in an operating system are provided. The aspects include performing on demand hardware instantiation via an ACE (an adaptive computing engine), and utilizing the hardware for monitoring predetermined software programming to protect an operating system.

Description

FIELD OF THE INVENTION[0001]The present invention relates to robust operating system protection.BACKGROUND OF THE INVENTION[0002]As is generally understood in computing environments, an operating system (O / S) acts as the layer between the hardware and the software providing several important functions. For example, the functionality of an O / S includes device management, process management, communication between processes, memory management, and file systems. Further, certain utilities are standard for operating systems that allow common tasks to be performed, such as file access and organization operations and process initiation and termination.[0003]Within the O / S, the kernel is responsible for all other operations and acts to control the operations following the initialization functions performed by the O / S upon boot-up. The traditional structure of a kernel is a layered system. Some operating systems use a micro-kernel to minimize a size of the kernel while maintaining a layered ...

AI Technical Summary

Benefits of technology

"The patent describes a way to create a protected space in an operating system using a special engine called ACE. This engine can be used to monitor and protect the operating system from vulnerabilities. The invention allows for easy and reliable monitoring of all the elements outside the operating system's own code, which helps to overcome vulnerabilities and make the operating system more secure. The ACE architecture is also flexible and can be adjusted as needed with changes to the operating system environment."

Problems solved by technology

While the typical structure provides a well-understood model for an operating system, some problems remain.

One such problem is the potential for crashing the machine once access below the demarcation line 60 is achieved.

For example, bugs in programs that are written for performing processes below the demarcation line, e.g., device drivers that interact with the hardware abstraction layer, protocol stacks between the kernel and the applications, etc., can bring the entire machine down.

While some protection is provided in operating systems with the generation of exceptions in response to certain illegal actions, such as memory address violations or illegal instructions, which trigger the kernel and kill the application raising the exception, there exists an inability by operating systems to protect against the vulnerability to fatal access.

Relying on software to perform such checks reduces the ability to limit the amount of software that is trusted.

A hardware solution would be preferable, but, heretofore, has been prohibitive due to the level of instantaneous hardware machine generation that would be necessary.

Images